admin/abuse.php

   1 <?PHP
   2 include_once('../slack.php');
   3 include_once('security.php');
   4 include_once('/var/www/secure.php'); //outside webserver
   5 include_once('functions.php');
   6 if ($_COOKIE['level'] == 'user'){
   7   slack_general('ADMIN: Redirect User Home ('.$_COOKIE['name'].') ('.$_COOKIE['level'].')','md-petition');
   8   header('Location: user_home.php');
   9 }
  10 if ($_COOKIE['level'] == 'manager'){
  11   slack_general('ADMIN: Redirect Manager Home ('.$_COOKIE['name'].') ('.$_COOKIE['level'].')','md-petition');
  12   header('Location: manager_home.php');
  13 }
  14 if (isset($_GET['flag_invalid_signature'])){
  15   $id = $_GET['flag_invalid_signature'];
  16   $petition->query("update signatures set signature_status = 'flag_invalid_signature' where id = '$id' ");
  17   header('Location: abuse.php');
  18 }
  19 if (isset($_GET['flag_duplicate'])){
  20   $id = $_GET['flag_duplicate'];
  21   $petition->query("update signatures set signature_status = 'flag_duplicate' where id = '$id' ");
  22   header('Location: abuse.php');
  23 }
  24 if (isset($_GET['flag_ip_address'])){
  25   $ip = $_GET['flag_ip_address'];
  26   $petition->query("update signatures set signature_status = 'flag_ip_address' where ip_address = '$ip' ");
  27   header('Location: abuse.php');
  28 }
  29 if (isset($_GET['flag_VTRID'])){
  30   $VTRID = $_GET['flag_VTRID'];
  31   $petition->query("update signatures set signature_status = 'flag_VTRID' where VTRID = '$VTRID' ");
  32   header('Location: abuse.php');
  33 }
  34 if (isset($_GET['flag_phone'])){
  35   $flag_phone = $_GET['flag_phone'];
  36   $petition->query("update signatures set signature_status = 'flag_phone' where contact_phone = '$flag_phone' ");
  37   header('Location: abuse.php');
  38 }
  39 include_once('header.php');
  40 if (isset($_GET['ip_address'])){
  41   $ip = $_GET['ip_address'];
  42   echo "<h1>Review $ip</h1><table width='100%' border='1' cellpadding='5' cellspacing='5'>";
  43   $q = "SELECT * FROM  signatures where ip_address = '$ip' order by signature_status ";
  44   $r = $petition->query($q);
  45   while($d = mysqli_fetch_array($r)){
  46     echo "<tr>
  47       <td><b>$d[date_time_signed]</b></td>
  48       <td><a href='?VTRID=$d[VTRID]'>$d[VTRID]</a></td>
  49       <td>".id2petition($d['petition_id'])."</td>
  50       <td>$d[signed_name_as]</td>
  51       <td>$d[signed_name_as_circulator]</td>
  52       <td>$d[contact_phone]</td>
  53       <td>$d[signature_status]</td>
  54       <td>$d[printed_status]</td>
  55       <td><a href='?flag_invalid_signature=$d[id]'>flag_invalid_signature</a></td>
  56       <td><a href='?flag_VTRID=$d[VTRID]'>flag_VTRID</a></td>
  57       <td><a href='?flag_ip_address=$d[ip_address]'>flag_ip_address</a></td>
  58       <td><a href='?flag_duplicate=$d[id]'>flag_duplicate</a></td>
  59       <td><a href='?flag_phone=$d[contact_phone]'>contact_phone</a></td>
  60     </tr>";
  61   }
  62   echo "</table>";
  63 }elseif (isset($_GET['VTRID'])){
  64   $VTRID = $_GET['VTRID'];
  65   echo "<h1>Review $VTRID</h1><table width='100%' border='1' cellpadding='5' cellspacing='5'>";
  66   $q = "SELECT * FROM  signatures where VTRID = '$VTRID' and signature_status = 'verified' order by petition_id, id DESC ";
  67   $r = $petition->query($q);
  68   while($d = mysqli_fetch_array($r)){
  69     echo "<tr>
  70           <td><b>$d[date_time_signed]</b></td>
  71           <td><a href='?ip_address=$d[ip_address]'>$d[ip_address]</a></td>
  72           <td>".id2petition($d['petition_id'])."</td>
  73           <td>$d[signed_name_as]</td>
  74           <td>$d[signed_name_as_circulator]</td>
  75           <td>$d[contact_phone]</td>
  76           <td>$d[signature_status]</td>
  77           <td>$d[printed_status]</td>
  78           <td><a href='?flag_invalid_signature=$d[id]'>flag_invalid_signature</a></td>
  79           <td><a href='?flag_VTRID=$d[VTRID]'>flag_VTRID</a></td>
  80           <td><a href='?flag_ip_address=$d[ip_address]'>flag_ip_address</a></td>
  81           <td><a href='?flag_duplicate=$d[id]'>flag_duplicate</a></td>
  82           <td><a href='?flag_phone=$d[contact_phone]'>contact_phone</a></td>
  83         </tr>";
  84   }
  85   echo "</table>";
  86 }
  87 ?>
  88
  89 <h1>Abuses</h1>
  90 <h2>IP Address</h2>
  91 <div>Watch for duplicates.</div>
  92 <?PHP
  93 $q="SELECT ip_address, petition_id,VTRID, COUNT(*) as count FROM signatures where signature_status = 'verified' group by ip_address, petition_id, VTRID";
  94 $r = $petition->query($q);
  95 while($d = mysqli_fetch_array($r)){
  96   if ($d['count'] > 1){
  97     echo "<li><a href='?ip_address=$d[ip_address]'>$d[ip_address]</a> <a href='?VTRID=$d[VTRID]'>$d[VTRID]</a> $d[petition_id] <b>$d[count]</b></li>";
  98   }
  99 }
 100 ?>
 101
 102 <h2>VTRID</h2>
 103 <div>Watch for duplicates.</div>
 104 <?PHP
 105 $q="SELECT VTRID, petition_id, COUNT(*) as count FROM signatures where signature_status = 'verified' group by VTRID, petition_id";
 106 $r = $petition->query($q);
 107 while($d = mysqli_fetch_array($r)){
 108   if ($d['count'] > 1){
 109     echo "<li><a href='?VTRID=$d[VTRID]'>$d[VTRID]</a> $d[petition_id] <b>$d[count]</b></li>";
 110   }
 111 }
 112 ?>
 113
 114 <h2>VTRID</h2>
 115 <div>Watch for 0</div>
 116 <?PHP
 117 $q="SELECT * FROM signatures where VTRID = '0'";
 118 $r = $petition->query($q);
 119 while($d = mysqli_fetch_array($r)){
 120     echo "<li><a href='?VTRID=$d[VTRID]'>$d[VTRID]</a> $d[petition_id]</li>";
 121 }
 122 ?>
 123
 124 <h2>petition_id</h2>
 125 <div>Watch for 0</div>
 126 <?PHP
 127 $q="SELECT * FROM signatures where petition_id = '0' or petition_id = '' ";
 128 $r = $petition->query($q);
 129 while($d = mysqli_fetch_array($r)){
 130     echo "<li><a href='?VTRID=$d[VTRID]'>$d[VTRID]</a> $d[petition_id]</li>";
 131 }
 132 ?>
 133
 134
 135
 136
 137
 138 <?PHP
 139 include_once('footer.php');
 140 ?>